Quantcast
Channel: Forcepoint Community
Viewing all 2011 articles
Browse latest View live

Can't create partitions

$
0
0

Hello

WSS 7.8 on 2012 R2.
Remote SQL 2008 R2 SP3 (standard edition)

Logging been working OK for a while since upgrade from 7.6.  Host and application was fresh install of 7.8 but db was upgraded.  Recently disk filled on WSS server, due to files in cache folder.  Turns out the existing database partitions (only 12 of them) are full but the Agent job is not creating a new partition.  If I try and create manually through Triton web interface, no joy.

The actual database is created, the files appear on disk in the correct folder on the SQL server, so NTFS permissions seem OK.  App event log on SQL shows the database created, various properties eg. autoshrink set, the recovery model set to Simple, and then the ETL Agent job runs but errors.  The .mdf and .ldf files are then removed.  The error from the Agent is:

SQL Server Scheduled Job 'Websense_ETL_Job__wslogdb70' (0x05C46BF717285D45B680BAA3550F34DC) - Status: Failed - Invoked on: 2015-01-15 15:22:20 - Message: The job failed. The Job was invoked by Schedule 86 (Websense_ETL_Job__wslogdb70_Schedule). The last step to run was step 1 (step1).

So when I look at the history in Mgmt Studio, I see a more interesting error:

Executed as user: <DOM\SQL_AGENT_ACCOUNT>. usp_new_partition() : 1: Invalid column name 'record_number'. [SQLSTATE 42000] (Error 50000).  The step failed.

I have deleted and recreated the jobs using the provided SP.

There appear to be no other abnormal errors on either the SQL host or the WSS host.  That SQL server is used by a few other applications which are working fine.

I have followed my nose through google searches, looking at various things.  One thing I looked at were the triggers in wslogdb70 and there may possibly be a relevant duplicate but I have nothing to compare against.  In sys.triggers I have 23 rows, the name values or which are

WsUpdateUserDirObjectTrigger
insert_trigger_db_maintenance
insert_trigger_wse_version
wsPartitions_Trigger
wsPartitions_dTrigger

usp_wse_db_event_trigger
trigger_wse_dashboard_config
insert_trigger_wse_etl_db_config
insert_trigger_wse_db_config
insert_trigger_wse_ibt_config
insert_trigger_wse_trend_config
trigger_ua_etl_config
trigger_wse_etl_config
update_trigger_filter_sets
insert_trigger_filter_sets
insert_trigger_filter_set_params
WsExpTriggerRequestCount
insert_trigger_report_spec
update_trigger_report_spec
trigger_wtg_etl_config
insert_trigger_wse_products
trigger_hosted_etl_config
trigger_amt_etl_config

Might be barking up completely the wrong tree!

Anybody seen anything like this before?

The account used to access SQL is a domain account, currently a member of sysadmin as well as a local Administrator of the both machines but given the Agent error about 'invalid column name' I think the problem is not permission related?

Any suggestions?

Thanks

D


Reg Ex to allow subdomain

$
0
0

Hi

I have a limited access filter where I list out urls which are allowed.

Can someone tell me how to use a reg ex to allow subdomains of a particular  website?

 

for example

All domains from http://www.website.com

http://webcast.website.com

http://data.website.com

http://login.website.com

 

 

Assign licenses only to specific IP addresses

$
0
0

We are running 7.8 on Win 2008 x64

Is there a way I can assign licenses to only our workstation IPs?

Right now licenses are given out to workstations and servers. Because of this, we usually exceed our subscription.

TRITONAPX shows Who are you login

Help fix my flash drive. Recovery Image ruined it.

$
0
0

https://www.websense.com/content/mywebsense-downloads.aspx

I created an image with my 32GB flash drive and the image turned my 32GB flash drive into a 6.30 GB flash drive. Anyone know how I can get it back? I even tried reformatting my flash drive to try to get it back to 32GB, but I think it's broke. I used the link above. I followed the steps that Websense suggested and used Image Writer to put the image onto the USB.

Someone else try it and see if their flash drives turns into a 6.30GB drive.

Error message on 2 x V5000 G2 Appliance installation

$
0
0

Hi Guys,

Set up as follows:

x.x.x.70 = Log server & DC Agent - Unified Security Center build: 7.7.3.11 on Windows 2008 R2

x.x.x.71 = V5000 G2 7.7.3 - Policy Source Mode: Full Policy Source – Primary Policy Server

x.x.x.72 = V5000 G2 7.7.3 – Policy Source Mode: User directory and filtering – Secondary Policy Server


On x.x.x.71 Settings – Logging – Log Server IP address = x.x.x.70 Port 55805, Check Status = Connection Succeeded

On x.x.x.71 Settings - Reporting - Log server - Settings – Log Server – Location IP address = x.x.x.70 and cannot be edited.  Port = 55805 (can be edited)

On x.x.x.71 Test Connection for the Database works and Test Location for the Cache files works.

 

On x.x.x.72 Settings – Logging – Log Server IP address = x.x.x.70 Port 55805, Check Status = Connection Succeeded

On x.x.x.72 Settings – Log Server – Locations IP address is blank and cannot be edited. Port = 55805 (can be edited)

On x.x.x.72 Settings - Reporting - Log server - Test Connection for the Database fails with IO Exception and Test Location for the Cache files fails with Path is invalid.

 

ETL job is running, files are going through the Cache folder and into SQL.
(Although the ETL job occasionally stalls and needs restarted by running
exec dbo.usp_create_background_jobs)
Can I assume that the failure of the connection tests in x.x.x.72 is not a problem?

Also - When I view Alerts on x.x.x.71 I see:
Filtering Service x.x.x.72 is unable to communicate with the DC Agent at x.x.x.70:30600

When I view Alerts on x.x.x.72 I don’t see this error message.

Why is this?
Is it anything to worry about?

 Thanks,

Anthony.

Missing network agents

$
0
0

Hello, I recently needed to add some ip addresses to the exceptions monitor list under 'settings' - 'network agent' - 'global' - 'IP address of network agent'. I noticed that two of my agents are missing. I do have quite a few and I was wondering if they weren't appearing because the list is too long. Im not getting any health errors in websense which is curious. You would think if config.xml were to be corrupt it would trigger an alarm at the main screen. I opened the config.xml and looked for the agents UID and found it in the list. the only thing I can think of doing is unregistering the network agent with 'networkagent -u' and re-registering it.

I also tried Internet explorer 11 in compatibility mode JUST incase it was a browser issue. Also tried firefox, same result.

Unified Security Center build:7.6.2.18
Web Security build:7.6.2.1449

 

Anyone have any input?

Database Download Failure

$
0
0

We have TWO V10k appliances (primary and secondary clustered).

The Scheduled update is run every hour and the primary update completes successfully, however the secondary fails. When pressing 'updating now' the secondary updates. Any advise appreciated.


Decreasing effectiveness of Email Security 7.3

$
0
0

My company has been using Email Security (now at version 7.3, the last) since the early days of it being Surf Control.  Lately though, it seems that the amount of spam leaking through the cracks is increasing a significant amount, despite the server's update schedule running regularly.

I understand that this product is no longer getting version upgrades, but my question is: Is there any reason that it should be becoming less effective as time wears on, despite definition updates?  What can I point to to try and figure out how to get a better detection rate without cranking up the false positives?

Is there any reason that the Email Security Gateway or other Websense products would do a better job of filtering our corporate mail compared to our Email Security 7.3 with all the latest definitions, and if so, how significant would you say that change would be?

How to allow Dropbox and Google Drive?

$
0
0

Hello All,

When I tried to use Dropbox and Google Drive software through Websence web filtering, cannot connect to the servers. also tried to permit all categories but still not connect. anyway let them working with websence !?

 

Thank you 

Blocking Netflix streaming

$
0
0

I am trying to block Netflix streaming on our network. We have to allow the "Streaming Media" category so I am unable to block it by category.

I have a custom category setup for certain video sites that we do block but the problem I am having with Netflix is that is uses so many different hostnames.

netflix-027.vo.llnwd.net     

The numbers in the hostnames vary into the hundreds. I am also unable to block llnwd.net since we use Lime Light for various video streams.

Does anyone have an idea how I can block these URLs without having to list the hundreds of hostnames?

 

 

 

IP Address to cluster mapping

$
0
0

Is there any URL that can tell based on a given IP Address which International cluster will be used for websecurity in the cloud.

We have a US based users using AT&T as an ISP is being served by UK cluster, I wanted to find out if there is any tool that can tell this mapping.

Regards

-Khalid

Upgrade on Linux 773 network agent fails

$
0
0

Trying to upgrade from 773 to 782 and my installer gets a cannot execute binary.  Could be a simple issue.  I have downloaded WebsenseWeb782, move to an install directory and change ownership to the install user.   

 

Installer instructions are uncompress and launch installer.   When doing so i get

 

 

Preparing to install...

Extracting the JRE from the installer archive...

Unpacking the JRE...

Extracting the installation resources from the installer archive...

Configuring the installer for this system's environment...

 

Launching installer...

 

/root/Websense_setup/Setup.bin: line 3319: /tmp/install.dir.11514/Linux/resource/jre/bin/java: cannot execute binary file

/root/Websense_setup/Setup.bin: line 3319: /tmp/install.dir.11514/Linux/resource/jre/bin/java: Success

 

 

Installation ends...

WS 7.8.4 ICAP has problem in http upload

$
0
0

HI, 

I use SQUID + WS7.8.4 ICAP to filter web, and found there is a problem in uploading file with HTTP in web. When the file size is more than hundrads of KB (not MB),  the upload process will suspend ancd cannot complete. When I stop to use ICAP, the upload process is fine. What can I do?

 

James

Websense TRITON Web security does not launch

$
0
0

Hello,

 

i have a problem. I upgraded my platform from Websense 7.7.3 to 7.8.4 and now the web security service doesn't launch.

 

Do you have any idea? i tried few ideas found on the internet but you might have something new :)

Thank you


How to Print Policies to File individually? NOT All Policies to file.

$
0
0

Can I to print policies to file (like a report) individually?
For example:
I want to print only my policy "Default" to show my boss what this policy is doing.
I saw that I can print ALL policies to excell. But it doesn't good. I need it like a report.
Is it possible?
thank you so much, and so sorry about my english. :p

How to Identify Blocked Content

$
0
0

I have a website that I'm trying to get to display that seems to be categorize correctly.  WebSense does not identify anything being blocked and all Categories are permitted.  Since this page utilizes flash, I have made sure that the swf extension is permitted, but the page will not load the content.  Are there any additional tools online somewhere that would help me determine what is causing this to not display.  The only thing Im aware of is the testLogServer.

 

Thank You.

New Relic - bam-nr.data.net

$
0
0

Hi,

 

Not sure If I'm on the right post discussion but I just want to share the behavior that recently bam-nr.data.net or the New Relic site was tagged as a Bot Network traffic.

As I searched every forums that this site was suppose to be placed back on it's original category which is "Web Analytics".

My question is:

Does anyone here experience the same scenario?

Why is the bam-nr.data.net also know New Relic site was mis-categorized to Bot Network?

Any documentation or proof that it has to be placed to its proper sub category "Web Analytics"?.

 

 

Btw, the Triton Web Security runs v7.8. Thank you!

Evaluation license expired

$
0
0

Hi, 

 

My evaluation license has expired a couple of days ago (Cloud security).

Now I have purchased 400 user license and want to activate the license to my existing portal as we already did AD synchronization. How can I get my user name enabled to activate license. Request you to suggest.

I am unable to login into my websense web portal to activate the license.

PIN Number is: 343701.

Thanks in advance.

 

Thanks and regards,

Ashok Kumar S.

 

need help with proxy please!

$
0
0

Hi guys,

I need some help here.

I have a client  with some issues when he try to access to a site

https://reportnew.netprovider.biz

So, i have a a custom filter  with a regular expressions  on it,  that permit this site, and also have a Recategorized URLs  filter  with the same url.

Anyway the client says That it was able to navigate to the site without problems but Suddenly he Couldn't do it anymore

 

He sent me  a picture of the message in his browser  it says

ERR_TUNNEL_CONNECTION_FAILED

anyone know what can i do to fix this problem?

Thanks! 

Viewing all 2011 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>